İçeriğe atla
Noroxi

Yayın tarihine göre

Kasım 2026: sömürülen ve yeni ciddi CVE kayıtları

3.408 kayıt · 10 KEV. Yayın sırasıyla.

Listede olanlar: CISA KEV'deki, silahlaştırılmış istismarı olan, EPSS'i %10 ve üstü olan, son 3 yılda yayımlanıp PoC'si bulunan ve son 90 günde yayımlanan CVSS 7 ve üstü kayıtlar. Diğer kayıtlar arama ve üretici sayfalarında.

Ay sınırları UTC'dir; kayıt sayfasındaki yayın tarihiyle aynı kural.

Sayfa 13 / 35

  • CVE-2026-103479
    30İzleyin

    Pubjet | پاب‌جت <= 5.4.8 - Authenticated (Subscriber+) Privilege Escalation to 'check-token' AJAX Action

    YüksekCVSS 7,6İstismar yokEPSS %0

    pubjet · pubjet | پاب‌جت5 gün önce

  • CVE-2026-104010
    30İzleyin

    WPSyncSheets For Contact Form 7 <= 1.8.0 - Unauthenticated PHP Object Injection to Remote Code Execution via Untrusted CF7 Submission Field via maybe_unserializ

    YüksekCVSS 7,5İstismar yokEPSS %0

    creativewerkdesigns · wpsyncsheets for contact form 7 – cf7 google sheets connector & save to database5 gün önce

  • CVE-2026-107622
    39İzleyin

    BuddyForms <= 2.10.5 - Unauthenticated Privilege Escalation to Form-Type Confusion via 'bf_post_type' Parameter

    KritikCVSS 9,8İstismar yokEPSS %0

    themekraft · buddyforms5 gün önce

  • CVE-2026-114630
    36İzleyin

    ELEX WordPress HelpDesk & Customer Ticketing System <= 3.3.8 - Unauthenticated Arbitrary File Deletion via 'ticket_attachment_path' Parameter

    KritikCVSS 9,1Kavram kanıtıEPSS %1

    elextensions · elex wordpress helpdesk & customer ticketing system5 gün önce

  • CVE-2026-116624
    35İzleyin

    Advanced Members for ACF <= 1.3.0 - Authenticated (Subscriber+) Privilege Escalation via Account Change-Password Form

    YüksekCVSS 8,8İstismar yokEPSS %0

    danbilabs · advanced members for acf5 gün önce

  • CVE-2026-123655
    30İzleyin

    Moodle: missing access checks on h5p content files

    YüksekCVSS 7,5İstismar yokEPSS %0

    5 gün önce

  • CVE-2026-49939
    30İzleyin

    Apache James: Negative IMAP ACL administer authorization bypass through JMAP protocol

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache james5 gün önce

  • CVE-2026-74756
    36İzleyin

    Apache James: WebAdmin exposed without authentication on official Docker default

    KritikCVSS 9,1İstismar yokEPSS %0

    apache software foundation · apache james5 gün önce

  • CVE-2026-76168
    39İzleyin

    Apache James: ManageSieve file implementation cross-user path traversal

    KritikCVSS 9,8İstismar yokEPSS %0

    apache software foundation · apache james5 gün önce

  • CVE-2026-76171
    36İzleyin

    Apache James: SSRF filter bypass in the JMAP PushSubscription web-push client

    KritikCVSS 9,1İstismar yokEPSS %0

    apache software foundation · apache james5 gün önce

  • CVE-2026-85108
    30İzleyin

    Apache James MIME4J: Denial of service due to Allocation of Resources Without Limits or Throttling

    YüksekCVSS 7,5İstismar yokEPSS %0

    apache software foundation · apache james mime4j core5 gün önce

  • CVE-2026-85111
    34İzleyin

    Apache James: Denial of service upon MIME parsing

    YüksekCVSS 8,7İstismar yokEPSS %0

    apache software foundation · apache james5 gün önce

  • CVE-2026-92895
    32İzleyin

    Live2DWebCanvas <= 2.2.1 - Unauthenticated Arbitrary File Upload via 'modelApi' Parameter

    YüksekCVSS 8,1İstismar yokEPSS %0

    jiangweifang · live2dwebcanvas5 gün önce

  • CVE-2026-109883
    28İzleyin

    WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    elementor · elementor website builder5 gün önce

  • CVE-2026-109884
    28İzleyin

    WordPress Elementor Website Builder plugin <= 4.3.5 - Cross Site Scripting (XSS) vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    elementor · elementor website builder5 gün önce

  • CVE-2026-115431
    28İzleyin

    WordPress Upsell Order Bump Offer for WooCommerce plugin <= 3.1.6 - Broken Access Control vulnerability

    YüksekCVSS 7,1İstismar yokEPSS %0

    wp swings · upsell order bump offer for woocommerce5 gün önce

  • CVE-2026-92080
    17İzleyin

    Path Traversal Leading to Arbitrary Mount in TÜBİTAK BİLGEM's pardus-boot-repair

    OrtaCVSS 4,3Kavram kanıtıEPSS %0

    tübi̇tak bi̇lgem software technologies research institute · pardus-boot-repair5 gün önce

  • CVE-2026-106019
    35İzleyin

    Insertion of sensitive information into log file vulnerability in Johnson Controls C-CURE 9000, Victor allows Use of Known Operating System

    YüksekCVSS 8,8İstismar yokEPSS %0

    johnson controls · c-cure 9000, victor5 gün önce

  • CVE-2026-106020
    34İzleyin

    Improper neutralization of input used for LLM prompting vulnerability in Johnson Controls EasyIO Neo IO Manager and Tools Installer allows S

    YüksekCVSS 8,6İstismar yokEPSS %0

    johnson controls · easyio neo io manager and tools installer5 gün önce

  • CVE-2026-106022
    34İzleyin

    Cleartext storage of sensitive information in memory vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows Retri

    YüksekCVSS 8,6İstismar yokEPSS %0

    johnson controls · easyio neo iomanager and tools installer5 gün önce

  • CVE-2026-112336
    28İzleyin

    Wazuh Manager 3.0.0 before 4.14.9 Memory Leak DoS via JSON Decoder

    YüksekCVSS 7,1İstismar yokEPSS %0

    wazuh · wazuh5 gün önce

  • CVE-2026-112338
    32İzleyin

    Wazuh from 4.3.0 before 4.14.9 SSRF via GitHub Module Link Pagination

    YüksekCVSS 8,2İstismar yokEPSS %0

    wazuh · wazuh5 gün önce

  • CVE-2026-112339
    32İzleyin

    Wazuh 3.9.0 before 4.14.9 Missing TLS Hostname Verification in fluent-forward Module

    YüksekCVSS 8,2İstismar yokEPSS %0

    wazuh · wazuh5 gün önce

  • CVE-2026-112340
    35İzleyin

    Wazuh 4.9.0 before 4.14.9 Authorization Header Override via /api/request

    YüksekCVSS 8,8İstismar yokEPSS %0

    wazuh · wazuh-dashboard-plugins5 gün önce

  • CVE-2026-112341
    28İzleyin

    Wazuh before 4.14.9 SQL Injection via WazuhDBBackend _substitute_params

    YüksekCVSS 7,1İstismar yokEPSS %0

    wazuh · wazuh5 gün önce

  • CVE-2026-119170
    32İzleyin

    Regression in FIPS enforcement of hash algorithms affecting only Python 3.14.10

    YüksekCVSS 8,2İstismar yokEPSS %0

    python software foundation · cpython5 gün önce

  • CVE-2026-123485
    28İzleyin

    Ground Station 0.6.0 before 0.8.20 Credential Disclosure via get-orbital-sources

    YüksekCVSS 7,1İstismar yokEPSS %0

    sgoudelis · ground-station5 gün önce

  • CVE-2026-123487
    34İzleyin

    Parse Server 9.0.0 before 9.10.7-alpha.1 ReDoS via Email Validation Regex

    YüksekCVSS 8,7İstismar yokEPSS %0

    parse-community · parse-server5 gün önce

  • CVE-2026-123488
    37İzleyin

    Craft CMS 4.0.0 before 4.18.9 SQL Injection via Element Search Endpoint

    KritikCVSS 9,3Kavram kanıtıEPSS %0

    craftcms · cms5 gün önce

  • CVE-2026-123489
    28İzleyin

    Craft CMS 4.0.0 before 4.18.9 Blind SQL Injection via getNext/getPrev Criteria

    YüksekCVSS 7,1İstismar yokEPSS %0

    craftcms · cms5 gün önce

  • CVE-2026-123490
    34İzleyin

    Craft CMS before 5.11.2 Privilege Escalation via getOwners() Sandbox Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    craftcms · cms5 gün önce

  • CVE-2026-123491
    35İzleyin

    Craft CMS 4.0.0 before 4.18.9 Unauthenticated SQL Injection via GraphQL Eager-Load Select

    YüksekCVSS 8,8İstismar yokEPSS %0

    craftcms · cms5 gün önce

  • CVE-2026-123618
    30İzleyin

    ABP Framework before 10.7.1 Authentication Bypass via External Login Provider

    YüksekCVSS 7,6İstismar yokEPSS %0

    abpframework · abp5 gün önce

  • CVE-2026-123620
    30İzleyin

    Usermin through 2.570 OS Command Injection via Read Mail IMAP Folder Deletion

    YüksekCVSS 7,7İstismar yokEPSS %1

    webmin · usermin5 gün önce

  • CVE-2026-123621
    34İzleyin

    Usermin through 2.570 Path Traversal File Write via detachall.cgi

    YüksekCVSS 8,6İstismar yokEPSS %0

    webmin · usermin5 gün önce

  • CVE-2026-123783
    34İzleyin

    Skyvern through 1.0.56 Script Sandbox Bypass via types.CodeType Bytecode

    YüksekCVSS 8,7İstismar yokEPSS %0

    skyvern-ai · skyvern5 gün önce

  • CVE-2026-123784
    34İzleyin

    Fluxbox through 1.3.7 OS Command Injection via Style Background Values

    YüksekCVSS 8,5İstismar yokEPSS %0

    fluxbox · fluxbox5 gün önce

  • CVE-2026-123786
    33İzleyin

    Agenta before 0.122.5 SSRF via Workflow Revision URL Leaks Secret Token

    YüksekCVSS 8,4İstismar yokEPSS %0

    agenta-ai · agenta5 gün önce

  • CVE-2026-53980
    34İzleyin

    Charmbracelet Wish 2.0.5 Path Traversal via git Middleware

    YüksekCVSS 8,6İstismar yokEPSS %0

    charmbracelet · wish5 gün önce

  • CVE-2026-59105
    37İzleyin

    Universal sysadmin credential vulnerability in Jumis

    KritikCVSS 9,3İstismar yokEPSS %1

    jumis pro sia · jumis5 gün önce

  • CVE-2026-64894
    29İzleyin

    Inclusion of functionality from untrusted control sphere vulnerability in Johnson Controls EasyIO Neo IOManager and Tools Installer allows M

    YüksekCVSS 7,3İstismar yokEPSS %0

    johnson controls · easyio neo iomanager and tools installer5 gün önce

  • CVE-2026-87045
    30İzleyin

    NULL pointer dereference in the Zephyr HTTP/2 server when a header block is completed by a CONTINUATION frame

    YüksekCVSS 7,5İstismar yokEPSS %0

    zephyrproject · zephyr5 gün önce

  • CVE-2026-121623
    32İzleyin

    Symfony: DataUriNormalizer Opens Data URIs With a Non-Lowercase Scheme as Local Files, Letting a Client Read Any Server File

    YüksekCVSS 8,2İstismar yokEPSS %0

    sensiolabs · symfony5 gün önce

  • CVE-2026-123623
    32İzleyin

    Grida through 0.0.24 Missing Authorization in Forms File-Preview API

    YüksekCVSS 8,2İstismar yokEPSS %0

    gridaco · grida5 gün önce

  • CVE-2026-123792
    34İzleyin

    Symfony: Exponential and Quadratic Parse Times in the YAML Parser Let a Single Document Hold a Process

    YüksekCVSS 8,7İstismar yokEPSS %0

    sensiolabs · symfony5 gün önce

  • CVE-2026-58141
    28İzleyin

    Dify < 1.15.0 SSRF Protection Bypass via Remote-Files Endpoints

    YüksekCVSS 7,2İstismar yokEPSS %0

    langgenius · dify5 gün önce

  • CVE-2026-80301
    35İzleyin

    Avast sandbox escape via unpreserved COM pathway through Task Scheduler

    YüksekCVSS 8,8İstismar yokEPSS %0

    gen digital · avast antivirus, avast one, avast premium security, avast ultimate5 gün önce

  • CVE-2026-80302
    35İzleyin

    Avast sandbox escape via arbitrary file write in virtualized environment

    YüksekCVSS 8,8İstismar yokEPSS %0

    gen digital · avast antivirus, avast one, avast premium security, avast ultimate5 gün önce

  • CVE-2026-90436
    39İzleyin

    Apache Axis 1.x (EOL): unauthenticated remote class instantiation via SOAP fault exceptionName

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    apache software foundation · apache axis 1.x (eol)5 gün önce

  • CVE-2026-103985
    28İzleyin

    FreeScout: a restricted agent can lift their own admin-imposed "see only assigned conversations" restriction via profile save

    YüksekCVSS 7,1İstismar yokEPSS %0

    freescout-help-desk · freescout5 gün önce

  • CVE-2026-104656
    29İzleyin

    Cross-site Scripting in Progress Telerik Fiddler Everywhere

    YüksekCVSS 7,3İstismar yokEPSS %0

    progress software · progress® telerik® fiddler® everywhere5 gün önce

  • CVE-2026-104657
    30İzleyin

    Missing Integrity Verification in Progress Software Fiddler Download & Setup Skill

    YüksekCVSS 7,5İstismar yokEPSS %0

    progress software · fiddler download & setup skill5 gün önce

  • CVE-2026-118515
    33İzleyin

    Symfony: The Serializer Builds UploadedFile Objects From Request Data, Letting a Client Point an Upload at Any Server File

    YüksekCVSS 8,4İstismar yokEPSS %0

    sensiolabs · symfony5 gün önce

  • CVE-2026-122193
    37İzleyin

    OS command injection in the example SSM documents in Trusted Remote Execution (REX)

    KritikCVSS 9,3İstismar yokEPSS %1

    aws · trusted-remote-execution5 gün önce

  • CVE-2026-123831
    38İzleyin

    In JetBrains CLion before 2026.2, 2026.1.4 code execution was possible in Safe Mode via Meson project settings

    KritikCVSS 9,6İstismar yokEPSS %0

    jetbrains · clion5 gün önce

  • CVE-2026-123832
    38İzleyin

    In JetBrains CLion before 2026.2 code execution was possible in Safe Mode via JSON compilation database

    KritikCVSS 9,6İstismar yokEPSS %0

    jetbrains · clion5 gün önce

  • CVE-2026-123834
    30İzleyin

    In JetBrains Datalore before 2026.4 improper scope validation in database tasks allowed using another workspace's service account

    YüksekCVSS 7,5İstismar yokEPSS %0

    jetbrains · datalore5 gün önce

  • CVE-2026-123836
    35İzleyin

    In JetBrains Datalore before 2026.4 workspace collaborators could obtain the owner's SSH private key via Git backup

    YüksekCVSS 8,8İstismar yokEPSS %0

    jetbrains · datalore5 gün önce

  • CVE-2026-123837
    31İzleyin

    In JetBrains IntelliJ IDEA before 2026.3, 2026.2.1 command injection was possible in untrusted projects via Tomcat run configurations on WS

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123838
    31İzleyin

    In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in Safe Mode via UI Designer form file

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123841
    31İzleyin

    In JetBrains IntelliJ IDEA before 2026.3 code execution was possible via symlinks in an imported settings archive

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123842
    28İzleyin

    In JetBrains IntelliJ IDEA before 2026.3 arbitrary file write was possible via symlinks when extracting plugin archives

    YüksekCVSS 7,1İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123848
    29İzleyin

    In JetBrains IntelliJ IDEA before 2026.3 host name verification was missing for server TLS certificates

    YüksekCVSS 7,4İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123849
    28İzleyin

    In JetBrains IntelliJ IDEA before 2026.3 code execution was possible in untrusted projects via the Terraform File Watchers

    YüksekCVSS 7,0İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123852
    29İzleyin

    In JetBrains Junie GitHub Action before 1.8.0 code execution with workflow credentials was possible via fork updates

    YüksekCVSS 7,4İstismar yokEPSS %0

    jetbrains · junie github action5 gün önce

  • CVE-2026-123853
    31İzleyin

    In JetBrains IntelliJ IDEA before 2026.3, 2026.2.2 code execution was possible in Safe Mode via project-controlled JVM options of the build

    YüksekCVSS 7,8İstismar yokEPSS %0

    jetbrains · intellij idea5 gün önce

  • CVE-2026-123855
    30İzleyin

    In JetBrains Toolbox App before 3.6.1 command injection was possible via enterprise configuration URLs

    YüksekCVSS 7,5İstismar yokEPSS %0

    jetbrains · toolbox app5 gün önce

  • CVE-2026-123859
    32İzleyin

    SQL Injection via unescaped DataFrame column names in Snowflake Connector for Python and Snowflake Connector for Python (Universal Core)

    YüksekCVSS 8,1İstismar yokEPSS %0

    snowflake · snowflake connector for python5 gün önce

  • CVE-2026-123962
    33İzleyin

    In FreedomBox before 26.15, unprivileged user accounts can read/write files for which they lack permissions by setting the authorized_keys f

    YüksekCVSS 8,4İstismar yokEPSS %0

    debian · freedombox5 gün önce

  • CVE-2026-62854
    30İzleyin

    FreeScout: Stored XSS in mailbox signature via same-origin JS upload

    YüksekCVSS 7,6İstismar yokEPSS %0

    freescout-help-desk · freescout5 gün önce

  • CVE-2026-62856
    30İzleyin

    FreeScout: Cross-User Notification Data Disclosure via LIKE Wildcard Injection in Polycast Channel Query

    YüksekCVSS 7,7İstismar yokEPSS %0

    freescout-help-desk · freescout5 gün önce

  • CVE-2026-85743
    32İzleyin

    FreeScout: Server-side request forgery via incomplete outbound host validation and unguarded download sinks

    YüksekCVSS 8,2İstismar yokEPSS %0

    freescout-help-desk · freescout5 gün önce

  • CVE-2026-102359
    30İzleyin

    Kroki: TikZ Secure Mode Local File Read via LaTeX File I/O Primitives

    YüksekCVSS 7,5İstismar yokEPSS %0

    yuzutech · kroki5 gün önce

  • CVE-2026-102650
    30İzleyin

    Nuxt Content: Unauthenticated SQLite Function DoS via Content Query API

    YüksekCVSS 7,5İstismar yokEPSS %0

    nuxt · content5 gün önce

  • CVE-2026-118670
    35İzleyin

    OHIF Viewers: DOM-Based Cross Site Scripting (XSS) through MIME type of document

    YüksekCVSS 8,8İstismar yokEPSS %0

    ohif · viewers5 gün önce

  • CVE-2026-119758
    28İzleyin

    ERPNext OCR 1.1.1 Path Traversal and SSRF via read_document

    YüksekCVSS 7,1İstismar yokEPSS %0

    monogramm · erpnext_ocr5 gün önce

  • CVE-2026-62344
    30İzleyin

    Wanderer: Unauthenticated Access to Private Trails and Comments via ActivityPub Endpoints

    YüksekCVSS 7,5İstismar yokEPSS %0

    open-wanderer · wanderer5 gün önce

  • CVE-2026-85742
    30İzleyin

    FreeScout: Conditional stored admin XSS via failed-job details

    YüksekCVSS 7,5İstismar yokEPSS %0

    freescout-help-desk · freescout5 gün önce

  • CVE-2026-89017
    34İzleyin

    Skyline DataMiner BrokerGateway Embedded API Key Authentication Bypass

    YüksekCVSS 8,7İstismar yokEPSS %0

    skyline communications · dataminer5 gün önce

  • CVE-2026-100081
    31İzleyin

    xen-netback: defer xenvif_mcast_addr_list_free()

    YüksekCVSS 7,8İstismar yokEPSS %0

    linux · linux5 gün önce

  • CVE-2026-107154
    35İzleyin

    A session validation vulnerability has been identified in the SonicOS management interface, which in specific conditions could potentially e

    YüksekCVSS 8,8İstismar yokEPSS %0

    sonicwall · sonicos5 gün önce

  • CVE-2026-107155
    35İzleyin

    A permissive cross-domain policy vulnerability has been identified in the SonicOS management interface, which in specific conditions could p

    YüksekCVSS 8,8İstismar yokEPSS %0

    sonicwall · sonicos5 gün önce

  • CVE-2026-119923
    37İzleyin

    Heap-based Buffer Overflow in Babelfish for PostgreSQL TDS Prelogin Parser

    KritikCVSS 9,3İstismar yokEPSS %0

    aws · babelfish-for-postgresql5 gün önce

  • CVE-2026-119924
    28İzleyin

    Out-of-Bounds Read in Babelfish for PostgreSQL TDS RPC Procedure-Name Parser

    YüksekCVSS 7,2İstismar yokEPSS %0

    aws · babelfish-for-postgresql5 gün önce

  • CVE-2026-123356
    30İzleyin

    GROBID: Unauthenticated `/api/modelTraining` Endpoint Allows Unbounded Thread Pool Creation (DoS)

    YüksekCVSS 7,5İstismar yokEPSS %0

    grobidorg · grobid5 gün önce

  • CVE-2026-123993
    34İzleyin

    Hisense VIDAA Smart TV Unauthenticated WebDriver Remote Access

    YüksekCVSS 8,7İstismar yokEPSS %0

    hisense · vidaa5 gün önce

  • CVE-2026-123997
    28İzleyin

    Hisense VIDAA Smart TV Unauthenticated DoS via SetAVTransportURI

    YüksekCVSS 7,1İstismar yokEPSS %0

    hisense · vidaa5 gün önce

  • CVE-2026-123998
    28İzleyin

    Hisense VIDAA Smart TV MQTT Broker Authentication Bypass

    YüksekCVSS 7,2İstismar yokEPSS %0

    hisense · vidaa5 gün önce

  • CVE-2026-19868
    60Bu hafta

    An authentication enforcement vulnerability in SonicOS SSLVPN service may allow a user with valid credentials for an alternate authenticatio

    YüksekCVSS 7,5KEVSilahlaştırılmışEPSS %0

    sonicwall · sonicos5 gün önce

  • CVE-2026-62345
    30İzleyin

    Stored XSS via Unsanitized waypoint.icon in Map Marker (insertAdjacentHTML)

    YüksekCVSS 7,6İstismar yokEPSS %0

    open-wanderer · wanderer5 gün önce

  • CVE-2026-62346
    30İzleyin

    Wanderer: Stored XSS via waypoint.name and waypoint.icon in Elevation Profile innerHTML

    YüksekCVSS 7,6İstismar yokEPSS %0

    open-wanderer · wanderer5 gün önce

  • CVE-2026-71495
    40Planlayın

    Wanderer: SSRF Vulnerability in /api/v1/trail/download - Unvalidated URL Leads to Internal Network Access

    KritikCVSS 10,0İstismar yokEPSS %0

    open-wanderer · wanderer5 gün önce

  • CVE-2026-82308
    30İzleyin

    A pre-authentication heap-based buffer overflow vulnerability has been identified in the SonicOS SSL-VPN service, which could potentially en

    YüksekCVSS 7,5İstismar yokEPSS %0

    sonicwall · sonicos5 gün önce

  • CVE-2026-84473
    39İzleyin

    Authentication Bypass / Missing Brute-Force Protection in remote.php/webdav/ in ownCloud ownCloud server 10.16.3 allows an unauthenticated r

    KritikCVSS 9,8Kavram kanıtıEPSS %0

    kiteworks · owncloud5 gün önce

  • CVE-2026-90975
    31İzleyin

    A vulnerability in Realtek's RtUsbA64.sys USB audio driver allows a local, low-privileged user to abuse a kernel I/O control (IOCTL) interfa

    YüksekCVSS 7,8İstismar yokEPSS %0

    realtek · rtusba64.sys5 gün önce

  • CVE-2026-123974
    31İzleyin

    pytorch/serve: Local privilege escalation through insecure temporary path

    YüksekCVSS 7,8İstismar yokEPSS %0

    pytorch · torchserve5 gün önce

  • CVE-2026-124027
    34İzleyin

    ChatWiki before 2.10.0 Unauthenticated Document Disclosure via getLibRawFileOnePage

    YüksekCVSS 8,7İstismar yokEPSS %0

    zhimaai · chatwiki5 gün önce

  • CVE-2026-124040
    36İzleyin

    CivetWeb through 1.16 HTTP/2 Use-After-Free via Stale Pseudo-Header State

    KritikCVSS 9,2Kavram kanıtıEPSS %0

    civetweb · civetweb5 gün önce

  • CVE-2026-33050
    35İzleyin

    GeoNode: OS command injection via uploaded file layer name

    YüksekCVSS 8,8Kavram kanıtıEPSS %0

    geonode · geonode5 gün önce

  • CVE-2026-58490
    39İzleyin

    Tracecat: Unsigned SAML response accepted in Docker Compose SAML deployments due to empty signing defaults

    KritikCVSS 9,8İstismar yokEPSS %0

    tracecathq · tracecat5 gün önce